diff --git a/docker/crd-installer.Dockerfile b/docker/crd-installer.Dockerfile
index 65c1706fc..aa520f1c6 100644
--- a/docker/crd-installer.Dockerfile
+++ b/docker/crd-installer.Dockerfile
@@ -1,5 +1,5 @@
 # Build the crdinstaller binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.26.6-1 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.26.8-1 AS builder
 
 ARG GOOS=linux
 ARG GOARCH=amd64
diff --git a/docker/hub-agent.Dockerfile b/docker/hub-agent.Dockerfile
index 99a813377..e846747d9 100644
--- a/docker/hub-agent.Dockerfile
+++ b/docker/hub-agent.Dockerfile
@@ -8,7 +8,7 @@
 # Segmentation fault" / "cgo: gcc produced no output" in runtime/cgo and net)
 # and, when it did not crash, took over an hour per image. Only the final
 # distroless stage is per-target, and it runs no commands.
-FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.6-1 AS builder
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.8-1 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
diff --git a/docker/member-agent.Dockerfile b/docker/member-agent.Dockerfile
index f05cf953b..1984568d9 100644
--- a/docker/member-agent.Dockerfile
+++ b/docker/member-agent.Dockerfile
@@ -8,7 +8,7 @@
 # Segmentation fault" / "cgo: gcc produced no output" in runtime/cgo and net)
 # and, when it did not crash, took over an hour per image. Only the final
 # distroless stage is per-target, and it runs no commands.
-FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.6-1 AS builder
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.8-1 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
diff --git a/docker/refresh-token.Dockerfile b/docker/refresh-token.Dockerfile
index 75b2a98a8..55271f4fc 100644
--- a/docker/refresh-token.Dockerfile
+++ b/docker/refresh-token.Dockerfile
@@ -8,7 +8,7 @@
 # Segmentation fault" / "cgo: gcc produced no output" in runtime/cgo and net)
 # and, when it did not crash, took over an hour per image. Only the final
 # distroless stage is per-target, and it runs no commands.
-FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.6-1 AS builder
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.8-1 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests